$ rpki-client -vvf rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft File: 9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft (raw, json) Hash identifier: H9BUiELa/liqoHXEsf1I+RWf+aUk4kn4TSpMm9v7JnI= Subject key identifier: 32:99:86:60:3D:D1:6C:37:05:0D:3F:E3:96:B6:07:63:44:A2:40:84 Authority key identifier: 9E:5A:74:B4:E1:E6:2D:25:BA:36:E3:E7:A4:40:2D:90:6E:F7:0E:2A Certificate issuer: /CN=9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A Certificate serial: 5EF41C0EBD4F756F67B35AA8EC8593723DCC111C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:25:24 +0000 Manifest this update: Tue 12 May 2026 19:20:24 +0000 Manifest next update: Wed 13 May 2026 22:45:24 +0000 Files and hashes: 1: 3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa (hash: lw3Ph+05xOCfBGre0101Mumi0SBmIeVe3yfjhxly5RI=) 2: 9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.crl (hash: D6caLrim/lw8rRk09sWVwpydhPP0QKtFunMuHXEhGkg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.crl rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:f4:1c:0e:bd:4f:75:6f:67:b3:5a:a8:ec:85:93:72:3d:cc:11:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A Validity Not Before: May 12 19:20:24 2026 GMT Not After : May 13 22:45:24 2026 GMT Subject: CN=329986603DD16C37050D3FE396B6076344A24084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:74:a1:02:ea:ae:f5:45:3a:87:2e:f5:ff:f9: 90:16:11:83:5b:2e:64:df:a9:68:7f:74:b8:8f:b7: 1a:ea:f1:05:e6:05:33:01:8f:6a:9a:43:8c:b4:c6: e5:71:d9:da:60:87:2f:a0:30:2d:7d:d7:43:d7:5a: 2c:05:79:80:8e:88:8c:f8:7d:09:d4:69:b8:c3:17: d1:a0:33:95:c9:35:3f:cc:62:41:71:d4:ce:fc:fb: b0:96:72:b9:5e:6d:b5:f8:64:1d:bb:c5:68:d0:d6: 77:b7:7e:4d:90:e0:ef:93:6a:29:07:d5:4f:a2:05: 85:87:c6:a1:d8:34:24:7e:b9:f2:4d:3c:1f:9e:c1: cd:92:c5:83:48:d7:78:00:7b:f8:84:8b:1d:c4:60: ec:c8:41:ec:07:80:33:91:d5:c8:b2:22:a3:57:71: 06:ef:0e:18:1e:b4:ee:3a:5e:3e:5f:e7:87:cd:d7: b2:a8:a2:fc:31:d0:27:bd:71:7b:00:b4:46:1f:b0: 03:62:59:64:2e:34:6b:4e:fc:ac:36:41:c2:6e:2b: 15:f3:07:f7:64:fd:8c:44:5e:e4:de:69:f8:0a:7c: 60:d5:8a:d8:f5:ab:c8:81:e7:2d:c0:0c:c6:fb:c7: fb:0b:f1:15:26:29:a5:f3:91:d4:95:02:fc:6d:9c: c4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:99:86:60:3D:D1:6C:37:05:0D:3F:E3:96:B6:07:63:44:A2:40:84 X509v3 Authority Key Identifier: keyid:9E:5A:74:B4:E1:E6:2D:25:BA:36:E3:E7:A4:40:2D:90:6E:F7:0E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:03:66:7b:6e:10:16:06:5b:90:74:51:76:ca:1c:04:f8:16: 49:ae:4b:21:0f:94:e6:22:6f:c6:56:19:86:ea:46:b2:52:ac: 3e:c3:a9:d5:7b:56:4c:7b:ca:73:53:78:c3:07:74:86:6f:e2: 30:ee:d5:12:2c:35:1f:e3:14:1e:4d:fe:89:d4:89:c6:cf:1c: ba:3e:f9:fb:70:a5:5e:8a:98:4a:49:98:35:f8:1f:3b:c1:56: 89:20:5e:59:67:3a:13:5c:53:39:30:b3:e6:f2:1d:6d:c2:34: a0:ad:64:f3:a2:93:ea:0b:f6:21:f3:e9:3c:6a:25:0d:64:cd: a0:bd:f4:53:51:d1:16:aa:9a:ac:e4:c3:bd:3b:ea:f0:10:2a: 7d:fd:e3:1a:84:b6:b6:b5:0b:72:bd:c3:b5:11:71:84:b0:60: c2:3f:8f:c7:d8:a6:6a:61:7c:82:19:d9:7e:13:0e:3a:14:8c: c4:36:fd:53:47:15:dd:54:f7:6e:64:90:4a:e9:87:a8:d0:8b: e7:c0:dc:f4:4f:7b:26:a5:9b:46:3a:d9:10:56:6f:56:c4:63: 83:a9:67:41:2e:d5:60:1d:30:8a:9e:21:81:62:ea:83:57:c3: 75:e1:90:90:c4:84:83:c3:8b:a6:1a:25:dd:e6:39:f3:fd:8b: 4a:c7:06:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXvQcDr1PdW9ns1qo7IWTcj3MERwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU1QTc0QjRFMUU2MkQyNUJBMzZFM0U3QTQ0MDJEOTA2 RUY3MEUyQTAeFw0yNjA1MTIxOTIwMjRaFw0yNjA1MTMyMjQ1MjRaMDMxMTAvBgNV BAMTKDMyOTk4NjYwM0REMTZDMzcwNTBEM0ZFMzk2QjYwNzYzNDRBMjQwODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYdKEC6q71RTqHLvX/+ZAWEYNb LmTfqWh/dLiPtxrq8QXmBTMBj2qaQ4y0xuVx2dpghy+gMC1910PXWiwFeYCOiIz4 fQnUabjDF9GgM5XJNT/MYkFx1M78+7CWcrlebbX4ZB27xWjQ1ne3fk2Q4O+TaikH 1U+iBYWHxqHYNCR+ufJNPB+ewc2SxYNI13gAe/iEix3EYOzIQewHgDOR1ciyIqNX cQbvDhgetO46Xj5f54fN17Koovwx0Ce9cXsAtEYfsANiWWQuNGtO/Kw2QcJuKxXz B/dk/YxEXuTeafgKfGDVitj1q8iB5y3ADMb7x/sL8RUmKaXzkdSVAvxtnMRrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMpmGYD3RbDcFDT/jlrYHY0SiQIQwHwYDVR0j BBgwFoAUnlp0tOHmLSW6NuPnpEAtkG73DiowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTZjMGNkNWQtZDA4NS00ZTJmLWIyMzAtN2I3ZTY2ZDEzOTNmLzAvOUU1QTc0QjRF MUU2MkQyNUJBMzZFM0U3QTQ0MDJEOTA2RUY3MEUyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RTVBNzRCNEUxRTYyRDI1QkEzNkUzRTdBNDQwMkQ5MDZFRjcw RTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTZjMGNkNWQtZDA4NS00ZTJmLWIy MzAtN2I3ZTY2ZDEzOTNmLzAvOUU1QTc0QjRFMUU2MkQyNUJBMzZFM0U3QTQ0MDJE OTA2RUY3MEUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF8DZntuEBYGW5B0UXbKHAT4FkmuSyEPlOYi b8ZWGYbqRrJSrD7DqdV7Vkx7ynNTeMMHdIZv4jDu1RIsNR/jFB5N/onUicbPHLo+ +ftwpV6KmEpJmDX4HzvBVokgXllnOhNcUzkws+byHW3CNKCtZPOik+oL9iHz6Txq JQ1kzaC99FNR0Raqmqzkw7076vAQKn394xqEtra1C3K9w7URcYSwYMI/j8fYpmph fIIZ2X4TDjoUjMQ2/VNHFd1U925kkErph6jQi+fA3PRPeyalm0Y62RBWb1bEY4Op Z0Eu1WAdMIqeIYFi6oNXw3XhkJDEhIPDi6YaJd3mOfP9i0rHBtU= -----END CERTIFICATE-----Generated at Wed May 13 01:41:10 2026 by rpki-client